early detection of missing kernel support

1 files changed, 6 insertions, 1 deletions

diff --git a/awall-cli b/awall-cli
index a853a57..e512878 100755
--- a/awall-cli
+++ b/awall-cli
@@ -152,6 +152,7 @@ end
 
 uerror = require('awall.uerror')
 call = uerror.call
+raise = uerror.raise
 
 if not call(
    function()
@@ -194,7 +195,7 @@ if not call(
 	 repeat
 	    local name = arg[opind]
 	    local policy = policyset.policies[name]
-	    if not policy then uerror.raise('No such policy: '..name) end
+	    if not policy then raise('No such policy: '..name) end
 	    policy[mode](policy)
 	    opind = opind + 1
 	 until opind > #arg
@@ -320,6 +321,10 @@ if not call(
 
       elseif mode == 'activate' then
 
+	 if not iptables.isenabled() then
+	    raise('Firewall not enabled in kernel')
+	 end
+
 	 iptables.backup()
 
 	 local pid, interrupted